CVE-2026-28421 Details
Description
Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
A heap-buffer-overflow vulnerability and a segmentation fault (SEGV) have been identified in Vim's swap file recovery process, affecting versions prior to 9.2.0077. These issues arise from unvalidated data read from manipulated pointer blocks within a swap file. The heap overflow occurs when a crafted swap file contains invalid block numbers or page counts that exceed the file size, leading to a buffer overflow in the database index array. The segmentation fault occurs when a negative block number is read, allowing Vim to attempt to access the original file with garbage parameters, causing a crash.
Users should update to Vim version 9.2.0077 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2026/02/27/10 | CVE | Mailing ListPatchThird Party Advisory |
| https://github.com/vim/vim/commit/65c1a143c331c886dc28 | [email protected] | Patch |
| https://github.com/vim/vim/releases/tag/v9.2.0077 | [email protected] | Product |
| https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vim vim | < 9.2.0077 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 4, 2026 | Initial Analysis | [email protected] |
| Feb 28, 2026 | CVE Modified | CVE |
| Feb 27, 2026 | New CVE Received | [email protected] |